...
Devo recommends sending VPC data without using CloudWatch. If you wish to use CloudWatch instead of following these instructions, select the aws_sqs_cloudwatch_vpc
service. The parsed logs will be the same.
Select the VPC.
Create flow log.
Name the Flow “Devo.”
Devo recommends
Filter All
so that wrongly rejected and wrongly accepted traffic can be analyzed.Select
Send to an Amazon S3 bucket
.Use the ARN of the S3 bucket you created during the authorization process.
Keeping the defaults for the other settings, create the flow.
...